Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/XBjUsIUdtfMfXNPtxRxnlXCXuqo.roa
File: XBjUsIUdtfMfXNPtxRxnlXCXuqo.roa (raw, json)
Hash identifier: OdSad9cay8Q55ufXpYXELSuBNbMggt6reqV2Jp/e8p0=
Subject key identifier: 5C:18:D4:B0:85:1D:B5:F3:1F:5C:D3:ED:C5:1C:67:95:70:97:BA:AA
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019D6BDDF2690752DEE4CA50F7D6C72E3BA2
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/XBjUsIUdtfMfXNPtxRxnlXCXuqo.roa
Signing time: Wed 08 Apr 2026 06:53:20 +0000
ROA not before: Wed 08 Apr 2026 06:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 216.236.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:dd:f2:69:07:52:de:e4:ca:50:f7:d6:c7:2e:3b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 8 06:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c18d4b0851db5f31f5cd3edc51c67957097baaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:e9:fd:cb:a2:ef:86:b0:4b:e9:db:4a:bd:
58:e1:eb:63:16:48:59:b8:bb:ba:d1:ca:0d:2b:55:
4f:48:b8:3d:3a:43:73:e4:24:30:69:cb:b6:4d:20:
30:bd:45:62:f7:e6:70:4f:11:c7:6f:60:36:6c:24:
9e:d2:01:a8:29:30:ee:73:66:f2:20:d7:03:62:51:
bb:f5:db:77:bd:2a:32:a4:e0:5c:cb:9e:48:a8:6b:
69:f9:cb:a6:10:4c:c7:f4:ad:a6:38:78:27:cd:ee:
5b:ea:98:46:14:ad:26:6d:b8:5e:9a:5c:2b:03:95:
26:e6:f9:09:48:fc:51:ed:fd:61:37:09:ee:bc:7a:
f3:09:df:53:46:aa:c6:a2:ba:53:25:db:8f:ce:6b:
80:e6:ef:43:00:8c:39:4e:32:2d:4e:74:15:e1:01:
24:3f:47:b7:b8:c9:86:cb:64:bf:d1:80:64:6b:68:
4b:1a:3f:c9:40:c0:43:4d:d4:a0:be:d5:c4:ca:5d:
07:5e:9d:03:c2:c1:47:3b:87:c3:3a:a8:95:dc:48:
dc:1b:d0:75:f0:42:d0:df:46:3e:94:33:13:ff:dd:
c0:f4:b1:e2:45:9f:84:8e:41:74:a4:9a:8d:19:f5:
11:93:10:b5:e9:a7:9e:4d:7c:f1:a6:56:07:42:6b:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:D4:B0:85:1D:B5:F3:1F:5C:D3:ED:C5:1C:67:95:70:97:BA:AA
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/XBjUsIUdtfMfXNPtxRxnlXCXuqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:98:84:68:9d:8f:f3:2a:7c:0f:cf:a7:82:b7:ca:45:4e:08:
fe:e2:eb:4a:fd:09:b1:f3:42:ef:05:74:2b:b1:13:a9:8a:5c:
ef:2c:e4:89:6b:70:a0:9c:a4:0d:a3:46:23:5b:83:2c:d5:2e:
f3:7e:d3:28:50:2a:02:01:f9:a0:41:fd:50:c9:f3:00:4c:1a:
28:25:dc:b7:a9:c0:1a:4a:8b:c3:cd:6b:46:a3:d2:c4:0a:78:
c8:e1:2e:9b:df:61:b6:07:3c:92:fe:85:ca:f1:5c:bc:ef:24:
95:0e:1f:a2:94:da:a9:6b:9a:f9:ec:f5:c3:6d:5e:c4:98:d8:
b3:57:ac:8f:9f:41:4d:62:7e:1e:66:11:90:2d:24:60:81:33:
3c:9d:d5:60:36:b9:d0:1c:29:a7:de:c4:7d:c3:f3:f6:6c:c4:
30:6f:9b:3e:23:b6:37:bd:07:37:10:21:2b:8f:ef:c8:fd:17:
de:5d:e6:4c:d1:63:37:66:3c:e8:b3:f3:fb:41:5a:ce:84:b5:
04:69:00:4d:4c:c4:af:2b:82:11:3c:f8:13:e4:94:59:cc:d8:
03:14:9e:4d:ce:01:84:bc:a8:70:99:12:97:6d:85:fa:dd:d9:
eb:a5:e8:78:a1:c4:64:ae:8a:0f:f0:69:91:5c:79:5a:e3:42:
53:4d:ce:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:57 2026 by rpki-client